CVE-2009-2823

No fix known EPSS 2%

The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.

Published 2009-11-10 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server